-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-13495 2012-11-17 19:34:40 --------------------------------------------------------------------------------
Name : cgit Product : Fedora EPEL 6 Version : 0.9.1 Release : 2.el6 URL : http://git.zx2c4.com/cgit/ Summary : A fast web interface for git Description : Cgit is a fast web interface for git. It uses caching to increase performance.
-------------------------------------------------------------------------------- Update Information:
Fix syntax highlight to use the correct version of highlight. Update to new upsteam version with 2 security fixes, enhancements and misc other bug fixes. See http://git.zx2c4.com/cgit/commit/?id=a6a932e198e8b6b564d7a4bb43e78078d829602... for details. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #877647 - Wrong setting of exec highlight https://bugzilla.redhat.com/show_bug.cgi?id=877647 [ 2 ] Bug #870714 - CVE-2012-4548 cgit: syntax-highlighting.sh command injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=870714 [ 3 ] Bug #820733 - avoid stack-smash when processing unusual commit [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=820733 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update cgit' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org